Executive brief
A security vulnerability exists in several Netgear router models that could allow an already authenticated administrator to gain even higher levels of access. An attacker with existing administrative credentials who is also connected to the local network could use this flaw to make unauthorized changes to the router's software and core functionality. This could lead to a complete compromise of the device's integrity and the network traffic it manages.
Technical details
A vulnerability classified as Improper Input Validation (CWE-20) exists in multiple Netgear router models, including the R7000, RAX, and Nighthawk Pro Gaming series. The flaw allows an authenticated user with administrative privileges, who is connected via an adjacent network (local network), to achieve further privilege escalation. By exploiting this improper validation, an attacker can modify router software and system functionality. The attack requires high privileges and has a high complexity, as reflected in the CVSS 4.0 score of 1.9.
Affected products
- Netgear R7000
- Netgear RAX20
- Netgear RAX35v2
- Netgear RAX41
- Netgear RAX41v2
- Netgear RAX42
- Netgear RAX42v2
- Netgear RAX43
- Netgear RAX43v2
- Netgear RAX45
- Netgear RAX49s
- Netgear RAX50
- Netgear RAX50s
- Netgear RAX50v2
- Netgear RAX54sv2
- Netgear RAXE450
- Netgear RAXE500
- Netgear XR1000
- Netgear XR1000v2
Timeline
- 2026-06-09: disclosed: Initial publication of CVE-2026-0410
References
- https://www.netgear.com/support/product/r7000/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax35v2/
- https://www.netgear.com/support/product/rax41/
- https://www.netgear.com/support/product/rax41v2/
- https://www.netgear.com/support/product/rax42/
- https://www.netgear.com/support/product/rax42v2/